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ODP 0-369 
26 March 1980 


MEMORANDUM FOR: Director of Central Intelligence 


VIA; 


FROM: 


SUBJECT: 

REFERENCE; 


Deputy Director for Administration 
Director, National Foreign Assessment Center 

Bruce T. Johnson 

Director of Data Processing, DDA 
Clarus W, Rice 

Director of Central Reference, NFAC 
Concerns Regarding SAFE 

Your memo dtd 21 March 1980, same subject 
(ExRag 80-754/1) 


1. This memorandum responds to your query of 21 March 
1980, transmitting some questions about SAFE posed by your 
Science and Technology Advisory Panel (STAP) . 

2. Attached are answers to the specific questions 
raised by the STAP, presented in a narrative form reflect- 
ing the complexity of some of the issues they addressed. 

These answers represent the coordinated views of OCR and 
ODP, reviewed and endorsed by the DDA and the Director, NFAC. 


3. At o ur meeting with you, now scheduled for 3 April, 


we propose that j | , Director of the Con- 

solidated SAFE Project Office (CSPO) , present a brief 
summary which addresses the four concerns you list in your 
memorandum, after which we will be prepared to elaborate on 
any of those or oth er STAP questions a bout SAFE . We will 


also have available! [ Chief of OCR's Systems 

Analysis Staff, to discuss NFAC's extensive efforts to iden- 
tify user requirements. 


4. We understand that Messrs .| 

will be at the meeting, and welcome the opportunity to 
discuss their questions with them. We would like to suggest, 
however, that it may be profitable for us to spend some 
additional time with them subsequent to our joint meeting 
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SUBJECT: Concerns Regarding SAFE 


with you, to supplement the one short briefing previously 
provided for them by SAFE'S managers. 


/s/ Bruce T. Johnson 

' Rrnpo m 


ciarus w; Rice 


STATINTL 


CONCUR: 


Deputy Director Tor A3minls"tration ~ ” Date 


? f, E/AR I 980 

Director, National Foreign Assessment Center Date 

Attachments: a/s 
cc : D/CSPO 

0/D/0DP/BJohnson:ee/3-26-80 

Distribution: 

Orig - DC I w/att. 

1 - DDCI w/att. <>«•/•? cC-t+L-U > 

1 - Exec. Reg. w/att. 

1 - D/NFAC w/att. 

1 - DDA w/att. 

1 - D/CSPO w/att. 

1 - D/OCR w/att 

2 - ODP Registry w/o att. 

^2 - O/D/ODP w/att. 
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Response to Questions and Comments from Science and Technology 
Advisory Panel Memorandum of 18 March 1980. 


CONCERN : 

1.0 What steps are being taken to ensure that the Agency, 
rather than the contractor is in control of the technical 
aspects of the design of the system? 


RESPONSE: 


1.0 The Agency has in place a strong technical management 
team. The contract effort is under control and the needs 
of two Agencies are being addressed successfully. In 
recognition of the problems of technical communication and 
management control compounded by geographic separation 
a number of steps have been taken as follows : 


STATINTL 


STATINTL 


a) The Government has contracted for a system development 
rather than technical effort. The . contractor is 
responsible for that development with government 
controls. The Government defines the functions 

and performance of the system as seen from a user’s 
perspective. The development is performed to 
government requirements specification in accordance 
with MIL Stds . 490 and 1521 with government approval 
required of all specifications and designs. The 
Government approves all solicitation documents, 
evaluation plans and contract awards by | 

b) Monthly formal project reviews are conducted by the 
Consolidated SAFE Project Office (CSPO) . Technical 
staff interaction daily by phone and virtually 
continuously through travel maintains communication. 
The contractor has several permanent representatives 
located in Rosslyn, headed by a deputy project 
manager for East Coast operations. 

c) Delays in decision making are not geographical 
problems. They are problems associated with hard 
choices. An on-site representative could provide 
oversight and some guidance but those problems of 
larger scope are not one-man problems. A full time 
government representative is being considered for 

* transfer to | | Travel will continue to 

be heavy in any event. 
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CONCERN : 

2.0 How is SAFE management ensuring that a final working 
system has been developed from the continuing evolution of 
an operationally valid pilot system? How has SAFE taken 
advantage of the experience of similar, very large systems 
in their: 

1) system architecture, 

2) communication and control, and 

3) changing performance requirements? 

How is SAFE management ensuring that the system will: 

1) make available data on operation and usage of the 
pilot system to guide development; 

2) be able to modify both system functions and interaction 
capabilities so as to meet changing and evolving 
requirements; and 

3) be able to add new functions and interactions so as 
to meet new requirements. 


STATINTL 


RESPONSE: 


2.0 The "operationally valid pilot system" from which 
evolution will take place is the system which will be 
delivered at IOC in December 1982. Experience with the 
"Interim" SAFE system inaugurated in 1973 is being used 
in building the operational system. Data and usage patterns, 
message and query analyses as well as user reactions are 
used in requirements specifications, system sizing, function 
allocation and usage scenario development. In order to 
ensure adaptability to changing needs and growth, we have 
dictated the maximum use of general-purpose computers and 

software . STATINTL 


The system architecture propos ed is the re sult of an 
18 month design competition between and is based 

on | land Government experience with large systems. It 


distributes communications and control functions as well 
as file processing such that bottlenecks are avoided and 
parallel expansion is possible without redesign. New 
functions may be added at either the top or mid-level 
processors. Functions may be moved between levels to 
compensate for loading or usage changes. 


We expect the initial system to have shortcomings. 
All major systems do. We expect, however, the initial 
system to provide significant improvements in service and 
value over the current environment. 
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2.0 - Continued 


The cautionary note in the STAP memorandum is well 
founded. We should expect to take up to a year to introduce 
the system services after which the system will continue 
to evolve. The SAFE budget for 1982 and beyond recognizes 
this process. 
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CONCERN : 

3.0 The SAFE user community consists of Intelligence 
Community analysts covering the full spectrum of research 
into foreign political, military, economic, scientific, 
and technological activity. Their effective use of this 
system and, ultimately, the quality of intelligence they 
produce rest on whether their real needs can be identified 
and satisfied by the system. 

RESPONSE: 

3.0 There has been more user involvement in the definition 
of the SAFE System than in any computer system of which we 
are aware. The interaction is continuing to refine and 
revalidate the system functions with the user. The CSPO 
maintains the balance of interactions with the contractor 
and - through OCR's System Analysis Staff and DIA's user 
points of contact - the users. 

-I The Consolidated SAFE Requirements Document, which is 

the foundation of the technical development, was developed 
with and largely by the using NFAC and DIA community. 

In the CIA this work began in 1972 and has included: 

o Pilot groups of 50 analysts defining useful 
functions 

o Pilot systems development in 1973/4 
o Pilot branches to date provide usage data 
o User workshops in 1975 

o 600 analyst survey in 1976 

o SAFE Procedures Development Laboratory 

o Project Upstairs/Downstairs with analysts 

o Newsletters 

o Direct interaction with CSPO and contractor of 
NFAC user representatives 
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3.0 continued 


In DIA there are 29 points of contact in user organizations 
who provide advice on requirements and are fully informed of 
project status. An extended data collection effort from 
1977 to the present has developed user requirements which 
have been staffed with top level user management. 


v olumin 
td 


All data gathered on the interim system usage and 


.ous data on DlA's DIAOLS system have been forwarded 

A11 prior study material has likewise been forwarded. 

These data are used to develop system design and flow threads. 


Four former analysts are resident in the CSPO to focus 
and control the flow of requirements and to ensure that they 
are met. This group coordinates heavily with both Agencies. 

We believe that a "community" system should be developed 
after SAFE and that SAFE would be a prototype for replication 
and potentially be a node in a community network. 

Training of users, operators and instructors is part of 
the system development contract. Both the Office of Training 
and NFAC will have instructors trained to support continuing 
operations and expansion of the user community. The Office 
of Data Processing will have operations personnel trained as 
a part of this effort. 
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CONCERN: 

oirren? W s?a?ua h nf A l?S? y ^ ® reasonable evaluation of the 
st ^ tus of SAFE with major portions of the proposed 
operational capabilities pit-hor j proposed 

to the Agency/ For exSmpJi/ uns P eca *^ d °r uncommunicated 


1 ) 

2 ) 

3) 

4) 


the user command language and its parsing, 
the user programming language, 
the user editing languages, and 

de?iSfd r Jfi5° r i ba ? UP ' includin 9 regeneration of 
derived files lost m crashes. 


RESPONSE: 

4. All operational capabilities required, includincr user 

ConloliSated SA?E k R P Ca P abilities ' are specified in ?he 
consolidated SAFE Requirements Document written bv the 

*1" ^ , n r specifications. These are being developed on 

ad^essed”^/ ?n r thn am ° Unt ° f dl£ficult y? Problems are 

For Sample iL ol^ / r °? eSS a " d corr ective action is taken. 
, example, the plan for language development was 

?Ms : f ?ort n ? erStanain t S WhiC " r ^ Uired -v«al mLtiigr 

CoitrJct schedule” ™ £ S° ad t0 Eatisfac tory resolution, 
for signs of 1?f?icSuy“ d maMgement a11 monitored 
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CONCERN : 

5.0 What actions are under way to insure that the Intelligence 
Community has access to CIA SAFE and that CIA SAFE has access 
to DIA SAFE as well as such systems as COINS and SOLIS? 


RESPONSE: 

5.0 The basic system requirement has been given the 
contractor to provide interconnection between the two Agencies. 
Five lines will be provided with expansion capacity to 25. 

The control of access, differing security clearance practices 
and control of limited access information will have to be 
worked out among the using and security organizations of the 
Agencies. With the security features of the system being 
developed, it is hoped that administrative procedures and 
software safeguards will be adequate. 

CIA SAFE consists of: 

o The private files, mail files, route files, and 
the other specific files in SAFE are designed to 
satisfy the needs of individual analysts and have 
limited meaning to other analysts. The tools 
that SAFE provides to manipulate these files 
can, however, be put to use by other Intelligence 
Community Agencies to satisfy the particular 
needs of their analysts. 

o The major Central File (RECON/AEGIS) of the CIA 
portion of SAFE is under consideration for being 
accessible by Intelligence Community analysts. 
Portions of this file are already available on 
COINS . 

o The link between NFAC and DIA will be used initially 
as a tool to coordinate intelligence reporting 
between the two agencies. Eventually, file 
sharing may take place if deemed useful by 
individual analysts. 

Generalized community access has not been envisioned in 
the initial system and presents additional security and, 
more vitally, loading problems. As already noted in 
response to question 3 we note that a "community" system 
should be developed after SAFE and that SAFE would be a 
prototype for replication and potentially be a node in a 
community network. 
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CONCERN: 

7.0 What steps are being taken to ensure that SAFE will be 
designed to allow collaborative usage? 


RESPONSE: 

7. Teleconferencing will be a part of SAFE. This will be 
permitted between CIA and DIA as well as within each Agency. 

The generalized routing function will also be used for 
staffing and coordination as well as for further dissemination 
of information. 

As noted in question 5, there are security and access 
questions yet to be resolved. 
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CONCERN: 

8.0 What steps are under way to ensure that in the procurement 
of major hardware items, these items will be compatible with 
existing Agency systems? 


RESPONSE: 

8. The question of compatibility is complicated by the fact 
that the CIA and DIA have different hardware. CIA/ODP uses 
IBM compatible equipment while DIA uses mainly Honeywell. 
Compatibility has been factored into the hardware Request for 
Proposal and a value has been established for cost evaluation. 
IBM compatible and Honeywell vendors thus have a cost advantage 
roughly equivalent to anticipated cost of supporting varied 
architectures . 

Interconnection between SAFE and existing systems in 
each Agency is planned and is part of the contracted effort. 

The interface software for SAFE has been considered as a 
direct contract cost. 


Approved For Release 2002/06/18 : CIA-RDP84-00933R000500070001-1 



